For anyone struggling with this - and there seems to be a lot - just follow these steps:
- Click on the website you want to disable the initial challenge for;
- Click on Security;
- Click on Bots
- Click on the Bot Fight Mode button to disable it
No more challenges - rather use WAF for that.
I might add that this also rejects attempts by Google Adsense to verify your site, as happened to me.